An Azure platform as a service offer that is used to deploy web and cloud applications.
The error AADSTS5000225: This tenant has been blocked due to inactivity means the Microsoft Entra (Azure AD) tenant backing the Azure DevOps and Visual Studio Marketplace identity has been put into an inactive state and sign‑in is blocked.
Key points from the tenant lifecycle behavior:
- When a tenant is marked inactive, sign‑ins are blocked and the error
AADSTS5000225is expected. - Administrators can request reactivation only within 20 days of the tenant entering the inactive state.
- After 20 days in this blocked state, the tenant is permanently deleted and cannot be recovered.
To proceed:
- Determine whether reactivation is still possible
Reactivation is only possible if the tenant has been blocked for less than 20 days. If it has been longer than 20 days, the tenant and its identities cannot be restored. - If within 20 days: contact Microsoft to request reactivation
As the tenant admin, open a support case with Microsoft to request tenant reactivation:- Use the official global support phone numbers listed in the tenant‑inaccessible documentation.
- Provide details such as the tenant ID or tenant domain (for example,
yourtenant.onmicrosoft.com), the error codeAADSTS5000225, and that this tenant is used as the identity provider for a Visual Studio Marketplace publisher. - Do not submit multiple requests for the same issue; wait for the decision on the initial case before opening another.
- Sign in using a tenant‑specific endpoint (if directed by support)
If support provides the tenant ID or confirms it is still present, sign in with a tenant‑specific URL such as:-
https://portal.azure.com/<TenantId> - or
https://portal.azure.com/<yourTenantName>.onmicrosoft.com
This can sometimes allow access to the portal for further actions once the block is lifted.
-
- If the tenant is already deleted (blocked > 20 days)
- The tenant cannot be recovered.
- A new tenant must be created and used going forward.
- For Visual Studio Marketplace and Azure DevOps, this would require re‑establishing identities and, if supported by those services, re‑linking or recreating publisher accounts under the new tenant.
- Avoid repeated auth attempts while blocked
Application owners and developers should minimize authentication requests against the blocked tenant until it is reactivated, and avoid submitting multiple assistance requests in parallel.
Because Visual Studio subscriptions and Marketplace publishing rely on Microsoft Entra identities, regaining access to the tenant (if still within the 20‑day window) via Microsoft support is the only path to restore the ability to sign in, generate PATs, and manage extensions under the existing publisher identity.
References:
- Tenant inaccessible due to inactivity
- 7 Day Old Azure Account: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: AADSTS5000225: This tenant has been blocked due to inactivity. - Microsoft Q&A
- Error message: interaction_required: AADSTS5000225: This tenant has been blocked due to inactivity - Microsoft Q&A
- Tenant inaccessible due to inactivity - Microsoft Q&A
- Troubleshooting suggestions for signing in to Visual Studio subscriptions
- Sign in to Visual Studio with accounts that require multifactor authentication (MFA)